A message processing method, a message processing device, a message preprocessing system and a computer device

By implementing methods such as receiving switch control, interface verification, key relationship verification, and route distribution query, the problem of existing message front-end systems being unable to adapt to different business systems has been solved. This has enabled unified management and security verification of bank message transmission channels, reducing the risk of network intrusion and attacks.

CN118316962BActive Publication Date: 2025-12-19AGRICULTURAL BANK OF CHINA
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202410475419.6
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-04-19
Publication Date
2025-12-19
Estimated Expiration
2044-04-19

AI Technical Summary

Technical Problem

The existing message front-end system is only designed for a specific business system and cannot be adapted to different business systems. This results in an increase in the number of message transmission channels for the bank's external interactions, leading to a high risk of network intrusion and attacks.

Method used

By receiving switch control, interface verification, key relationship verification, and route distribution query, it supports message access and forwarding between different business systems and external organizations, and realizes unified management of message transmission channels.

Benefits of technology

This reduces the risk of network intrusion and attacks, and enables centralized management and security verification of the bank's external communication message transmission channels.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN118316962B_ABST
    Figure CN118316962B_ABST
Patent Text Reader

Abstract

The application discloses a message processing method, a message processing device, a message preposition system and computer equipment. When the message preposition system sends a target message from a source end to a destination end, a first control result is obtained by controlling a receiving switch of the source end to receive the target message; the first control result indicates that the target message is received when the receiving switch is enabled; a target verification result is obtained by performing interface verification on the target message through a service interface corresponding to the source end; the target verification result indicates that the target message is stored when the verification is passed; a target verification result is obtained by verifying the relationship between the source end and the destination end based on the target message; the target verification result indicates that a target routing distribution strategy is obtained by querying the routing distribution of the target message based on the source end and the destination end when the verification is passed; a second control result is obtained by controlling a sending switch of the destination end to send the target message; the second control result indicates that the target message is sent to the destination end according to the target routing distribution strategy when the sending switch is enabled.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data processing, and in particular to a message processing method, a message processing device, a message preposition system and a computer device. BACKGROUND

[0002] At present, the business of a bank has diversity, and different business systems are generally used to process different businesses, that is, the business systems of the bank also have diversity; correspondingly, different external agencies need to be interacted with messages to process different businesses, and the external agencies also have diversity.

[0003] In the related art, a message preposition system is constructed to connect a certain business system of a bank internally and connect an external agency corresponding to a business processed by the business system externally, to realize message access and forwarding between the business system and the external agency, so as to realize message interaction to process the specific business.

[0004] However, the message preposition system is only for a certain business system, has low scalability and cannot adapt to different business systems, so that a message preposition system needs to be constructed for each type of business system, resulting in an increase in the message transmission channel for external interaction of the bank and an increase in the risk of network intrusion and attack. SUMMARY

[0005] Therefore, the embodiments of the present application provide a message processing method, a message processing device, a message preposition system and a computer device, in the scenario of message interaction between the business system of a bank and an external agency, the message processing method of the message preposition system supports message access and forwarding between different business systems and different external agencies when sending target messages from different source ends to destination ends through different receiving switch controls, interface verifications, cryptographic relationship verifications, route distribution queries and sending switch controls, and can converge and unify the message transmission channel for external interaction of the bank, so as to reduce the risk of network intrusion and attack.

[0006] In one aspect, the embodiments of the present application provide a message processing method applied to a message preposition system, and the method comprises:

[0007] When sending a target message from a source end to a destination end, receiving switch control of the target message is performed according to the source end, and a first control result is obtained;

[0008] If the first control result indicates that the receiving switch state is enabled, the target message sent by the source end is received;

[0009] Interface verification of the target message is performed according to a business interface corresponding to the source end, and a target verification result is obtained;

[0010] If the target check result indicates that the check is passed, the target message is stored;

[0011] Based on the target message, the source end and the destination end are checked for the relationship, and a target check result is obtained;

[0012] If the target check result indicates that the check is passed, the target message is routed and distributed according to the source end and the destination end, and a target routing distribution strategy of the target message is obtained;

[0013] According to the destination end, the target message is sent and switch controlled, and a second control result is obtained;

[0014] If the second control result indicates that the sending switch state is enabled, the target message is sent to the destination end according to the target routing distribution strategy.

[0015] Optionally, the target check result is obtained by checking the relationship between the source end and the destination end based on the target message, and the target check result comprises:

[0016] The first check result is obtained by checking the registration relationship of the source end and the destination end for sending and receiving messages;

[0017] The second check result is obtained by checking the function state of the source end and the destination end for sending and receiving messages;

[0018] The target check result is determined according to the first check result and the second check result.

[0019] Optionally, the target routing distribution strategy of the target message is obtained by querying the routing distribution of the target message according to the source end and the destination end, and the target routing distribution strategy comprises:

[0020] The target routing distribution strategy of the target message is obtained by querying the routing distribution of the target message according to the service key information of the source end and the destination end; the service key information comprises a source end system, a service type, a service channel and a message type.

[0021] Optionally, the interface check mode comprises one or more of the following:

[0022] Key domain information check, message format check and transmission identity check.

[0023] Optionally, the method further comprises:

[0024] An abnormal event occurring in the message pre-system is obtained;

[0025] The abnormal event is abnormally graded, and an abnormal level of the abnormal event is obtained;

[0026] According to the abnormal level, the abnormal event is automatically processed, and a processing result of the abnormal event is obtained.

[0027] Optionally, the method further comprises:

[0028] According to the registered data in the database corresponding to the message preposition system, system detection is performed on the message preposition system, and a system detection result of the message preposition system is obtained; the registered data includes one or more of health state data, abnormal information data, and important matter data;

[0029] The system detection result is prompted to an operation and maintenance user of the message preposition system.

[0030] Optionally, the method further comprises:

[0031] In response to a query request of a target user for the target message, data desensitization is performed on the target message according to a query authority of the target user, and a desensitized target message is obtained;

[0032] The desensitized target message is displayed to the target user.

[0033] In another aspect, an embodiment of the present application provides a message processing device deployed in a message preposition system, the device comprising: a control unit, a receiving unit, a verification unit, a storage unit, an investigation unit, a query unit, and a sending unit;

[0034] The control unit is configured to, when a target message is sent from a source end to a destination end, perform receiving switch control on the target message according to the source end, and obtain a first control result.

[0035] The receiving unit is configured to, if the first control result indicates that the receiving switch state is enabled, receive the target message sent by the source end.

[0036] The verification unit is configured to perform interface verification on the target message according to a business interface corresponding to the source end, and obtain a target verification result.

[0037] The storage unit is configured to, if the target verification result indicates that the verification is passed, store the target message.

[0038] The investigation unit is configured to investigate a master-slave relationship between the source end and the destination end based on the target message, and obtain a target investigation result.

[0039] The query unit is configured to, if the target investigation result indicates that the investigation is passed, perform routing distribution query on the target message according to the source end and the destination end, and obtain a target routing distribution strategy of the target message.

[0040] The control unit is further configured to perform sending switch control on the target message according to the destination, and obtain a second control result.

[0041] The sending unit is configured to send the target message to the destination according to a target routing distribution strategy if the second control result indicates that the sending switch state is enabled.

[0042] Optionally, the verification unit is specifically configured to:

[0043] verify a registration relationship of the source and the destination in terms of sending and receiving messages, and obtain a first verification result;

[0044] verify a function state of the source and the destination in terms of sending and receiving messages, and obtain a second verification result;

[0045] determine the target verification result according to the first verification result and the second verification result.

[0046] Optionally, the query unit is specifically configured to:

[0047] query a target routing distribution strategy of the target message according to service key information of the source and the destination, wherein the service key information comprises a source system, a service type, a service channel and a message type.

[0048] Optionally, the interface verification manner comprises one or more of the following:

[0049] key domain information verification, message format verification and transmission identity verification.

[0050] Optionally, the device further comprises an acquisition unit, a grading unit and a processing unit.

[0051] The acquisition unit is configured to acquire an abnormal event occurring in a message pre-system.

[0052] The grading unit is configured to perform abnormal grading on the abnormal event, and obtain an abnormal level of the abnormal event.

[0053] The processing unit is configured to perform automatic processing on the abnormal event according to the abnormal level, and obtain a processing result of the abnormal event.

[0054] Optionally, the device further comprises a detection unit and a prompt unit.

[0055] The detection unit is configured to perform system detection on the message preposition system according to registered data in a database corresponding to the message preposition system, and obtain a system detection result of the message preposition system, wherein the registered data comprises one or more of health state data, abnormal information data and important matter data.

[0056] The prompting unit is configured to prompt an operation and maintenance user of the message preposition system with the system detection result.

[0057] Optionally, the device further comprises a desensitization unit and a display unit.

[0058] The desensitization unit is configured to perform data desensitization on the target message according to a query authority of a target user in response to a query request of the target user for the target message, and obtain a desensitized target message.

[0059] The display unit is configured to display the desensitized target message to the target user.

[0060] In another aspect, an embodiment of the present application provides a message preposition system, which comprises an interface module and a transmission module.

[0061] The interface module is configured to perform receiving switch control on a target message when the target message is sent from a source end to a destination end, and obtain a first control result; if the first control result indicates that the receiving switch state is enabled, the target message sent by the source end is received; interface verification is performed on the target message, and a target verification result is obtained; if the target verification result indicates that the verification is passed, the target message is stored.

[0062] The transmission module is configured to perform a secret relationship verification on the target message, and obtain a target verification result; if the target verification result indicates that the verification is passed, a routing distribution query is performed on the target message, and a target routing distribution strategy of the target message is obtained.

[0063] The interface module is further configured to perform sending switch control on the target message, and obtain a second control result; if the second control result indicates that the sending switch state is enabled, the target message is sent to the destination end according to the target routing distribution strategy.

[0064] In another aspect, an embodiment of the present application provides a computer device, which comprises a processor and a memory.

[0065] The memory is configured to store a computer program, and transmit the computer program to the processor.

[0066] The processor is configured to execute the method according to the instructions in the computer program.

[0067] Compared with the prior art, the application has at least the following advantages:

[0068] According to the technical scheme of the application, when the message preposition system sends a target message from a source end to a destination end, a first control result is obtained by controlling a receiving switch of the source end to receive the target message; if the first control result indicates that the receiving switch is enabled, the target message sent by the source end is received; an interface check result of the target message is obtained by performing interface checking on the target message by a service interface corresponding to the source end; if the interface check result indicates that the checking is passed, the target message is stored; a target check result is obtained by checking a relationship between the source end and the destination end based on the target message; if the target check result indicates that the checking is passed, a target routing distribution strategy of the target message is obtained by performing routing distribution query on the target message according to the source end and the destination end; a second control result is obtained by controlling a sending switch of the destination end to send the target message; and if the second control result indicates that the sending switch is enabled, the target message is sent to the destination end according to the target routing distribution strategy. It can be seen that in the scenario of message interaction between the business system of the bank and the external agencies, the message processing method of the message preposition system supports message access and forwarding between different business systems and different external agencies by different receiving switch control, interface checking, relationship check, routing distribution query and sending switch control, and can converge and uniformly manage the message transmission channel of the bank, so as to reduce the risk of network intrusion and attack. BRIEF DESCRIPTION OF DRAWINGS

[0069] In order to more clearly illustrate the technical scheme of the application, the drawings needed in the description of the application will be briefly introduced as follows. Obviously, the drawings in the following description are only some embodiments described in the application, and other drawings can be obtained by those skilled in the art without creative labor.

[0070] Figure 1 The system framework schematic diagram involved in an application scenario in the application embodiment;

[0071] Figure 2 The flowchart of a message processing method provided by the application embodiment;

[0072] Figure 3 The specific flowchart of a message processing method provided by the application embodiment;

[0073] Figure 4 The structural schematic diagram of a message processing device provided by the application embodiment;

[0074] Figure 5A structural schematic diagram of a message preposition system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0075] In order to enable those skilled in the art to better understand the scheme of the present application, the technical scheme in the embodiments of the present application will be described clearly and completely below in combination with the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor are within the scope of protection of the present application.

[0076] At present, the business of a bank has diversity, so that the business system of the bank also has diversity, and correspondingly, the external agencies also have diversity. When the business system of the bank and the external agencies perform message interaction to process the business, a message preposition system is usually constructed to connect a specific business system of the bank internally and connect the external agencies corresponding to the specific business processed by the business system externally, so as to realize message access and forwarding between the business system and the external agencies, thereby realizing message interaction to process the specific business. However, the inventors have found through research that the message preposition system is only for a specific business system, has low scalability and cannot adapt to different business systems, so that a message preposition system needs to be constructed for each kind of business system, resulting in an increase in the message transmission channels of the bank for external interaction and a higher risk of network intrusion and attack.

[0077] In order to solve this problem, in the embodiments of the present application, when different source terminals send target messages to a destination terminal, different receiving switch controls, interface verifications, secret stamp relationship verifications, route distribution queries and sending switch controls are used to support message access and forwarding between different business systems and different external agencies, so as to converge and unify the message transmission channels of the bank for external interaction and centrally manage them, thereby reducing the risk of network intrusion and attack.

[0078] For example, one of the scenarios of the embodiments of the present application can be applied to the scenario as shown in FIG. 1. Figure 1 The scenario includes a plurality of business systems 101 of a bank, a message preposition system 102 and a plurality of external agencies. In the scenario in which the plurality of business systems 101 of the bank and the plurality of external agencies 103 perform message interaction, the message preposition system 102 performs the embodiments provided in the present application, realizes support for message access and forwarding between different business systems and different external agencies, and can converge and unify the message transmission channels of the bank for external interaction and centrally manage them.

[0079] First, in the above application scenarios, although the action description of the embodiment provided by the present application is executed by the message preposition system 102; however, the present application embodiment is not limited in terms of execution subject, as long as the action disclosed by the embodiment provided by the present application is executed.

[0080] Secondly, the above scenario is only one scenario example provided by the present application embodiment, and the present application embodiment is not limited to this scenario.

[0081] The specific implementation of the message processing method, the message processing device, the message preposition system and the computer device in the present application embodiment will be described in detail below by embodiments in combination with the drawings.

[0082] First, the specific implementation of the message processing method in the present application embodiment will be described in detail by embodiments.

[0083] Referring to Figure 2 , Figure 2 A flowchart of a message processing method provided by the present application embodiment. In this embodiment, the method is applied to a message preposition system, which may, for example, include the following:

[0084] S201: When sending a target message from a source end to a destination end, a first control result is obtained according to the source end receiving switch control of the target message.

[0085] S202: If the first control result indicates that the receiving switch state is enabled, the target message sent by the source end is received.

[0086] In the related art, when the business system of a bank interacts with an external agency to process a business, a message preposition system is usually constructed to connect a specific business system of the bank internally and connect the external agency corresponding to the specific business processed by the business system externally, to realize message access and forwarding between the business system and the external agency, thereby realizing message interaction to process the specific business. However, through research, it is found that the message preposition system is only for a specific business system, has low scalability and cannot adapt to different business systems, so a message preposition system needs to be constructed for each business system, resulting in an increase in the message transmission channel for external interaction of the bank and an increase in the risk of network intrusion and attack.

[0087] Therefore, in the embodiments of the present application, considering that the message access between different business systems and external agencies needs to meet the service requirements between the corresponding business systems and external agencies, the message preposition system needs to implement fine-grained receiving switch control, so that the subsequent message access between different business systems and external agencies can be implemented without missing any receivable messages and releasing any unreceivable messages. Based on this, the message access between the target business system and the target external agency is taken as sending a target message from a source end to a destination end, and the message preposition system needs to meet the service requirements of the source end in the source end and the destination end when receiving the target message sent from the source end to the destination end. That is, when the message preposition system sends the target message from the source end to the destination end, first, the receiving switch control of the target message needs to be performed according to the source end, and a first control result is obtained. If the first control result indicates that the receiving switch state is enabled, the target message sent from the source end is received.

[0088] In addition, in the embodiments of the present application, if the first control result indicates that the receiving switch state is disabled, the target message sent from the source end is rejected.

[0089] The S201-S202 receiving switch control mode can ensure that when an unexpected risk occurs in a business system or an external agency, the message preposition system can directly close the door of message access between the business system and the external agency as a gate total control, and prevent accidents from happening. At the same time, the message access between other business systems and external agencies can still be normally performed.

[0090] S203: performing interface verification on the target message according to the business interface corresponding to the source end to obtain a target verification result.

[0091] S204: if the target verification result indicates that the verification is passed, storing the target message.

[0092] In the embodiments of the present application, considering that the message preposition system implements message access between different business systems and external agencies through different business interfaces, different interface verifications need to be implemented on the messages received by different business interfaces, so that the message access between different business systems and external agencies can be implemented without missing any receivable messages and releasing any unreceivable messages. Based on this, after the receiving switch state is determined to be enabled and the target message sent from the source end is received by performing the receiving switch control when the source end sends the target message to the destination end in the above S201-S202, the target message needs to implement the interface verification of the business interface corresponding to the source end. The interface verification is performed on the target message according to the business interface corresponding to the source end, and a target verification result is obtained. If the target verification result indicates that the verification is passed, the target message is stored.

[0093] In addition, in the embodiment of the present application, if the target verification result indicates that the verification is not passed, the target message is rejected, so that the target message does not need to be sent to the destination.

[0094] The S203-S204 interface verification mode implements security verification for message access between different business systems and external agencies, so that no receivable message is missed and no unreceivable message is released.

[0095] In the implementation of S203, the target message received by the business interface corresponding to the source end needs to be verified in terms of key domain information, message format, and transmission identity, so as to implement security verification for the target message sent by the source end to the destination. Therefore, in an optional implementation of the embodiment of the present application, the interface verification mode includes one or more of the following: key domain information verification, message format verification, and transmission identity verification.

[0096] S205: Based on the target message, the source end and the destination are investigated for the relationship, and a target investigation result is obtained.

[0097] S206: If the target investigation result indicates that the investigation is passed, the target message is routed and distributed according to the source end and the destination, and a target routing and distribution strategy of the target message is obtained.

[0098] In the embodiment of the present application, after the message preposition system implements message access between different business systems and external agencies, it is necessary to further investigate whether message interaction can be performed between different business systems and external agencies. If so, according to the routing and distribution strategy between the corresponding business system and the external agency, the message preposition system implements message forwarding between different business systems and external agencies to realize fine-grained routing control. Based on this, after the above S203-S204 determines that the received target message sent by the source end to the destination passes the interface verification and stores the target message, the source end and the destination are investigated for the relationship based on the target message, and a target investigation result is obtained. If the target investigation result indicates that the investigation is passed, the target message is routed and distributed according to the source end and the destination, and a target routing and distribution strategy of the target message is obtained.

[0099] In addition, in the embodiment of the present application, if the target investigation result indicates that the investigation is not passed, the target message does not need to be routed and distributed according to the source end and the destination, so that the target message does not need to be sent to the destination.

[0100] In the implementation of S205, whether the message interaction between different business systems and external agencies can be performed is actually verified, i.e., whether the registered relationship of the interactive message between different business systems and external agencies exists and whether the interactive function of the interactive message is enabled. Based on this, the source end and the destination end are verified based on the target message, which means that the registered relationship of the source end and the destination end for sending and receiving messages is verified to obtain a first verification result, and the function state of the source end and the destination end for sending and receiving messages is verified to obtain a second verification result, so that the target verification result can be determined through the first verification result and the second verification result. Therefore, in an optional implementation of the embodiment of the present application, the source end and the destination end are verified based on the target message to obtain the target verification result, including S2051-S2053 (not shown in the figure) as follows:

[0101] S2051: The registered relationship of the source end and the destination end for sending and receiving messages is verified to obtain a first verification result.

[0102] S2052: The function state of the source end and the destination end for sending and receiving messages is verified to obtain a second verification result.

[0103] S2053: The target verification result is determined according to the first verification result and the second verification result.

[0104] If the first verification result indicates that the registered relationship of the source end and the destination end for sending and receiving messages exists, and the second verification result indicates that the function state of the source end and the destination end for sending and receiving messages is enabled, the target verification result indicates that the verification is passed. On the contrary, if the first verification result indicates that the registered relationship of the source end and the destination end for sending and receiving messages does not exist, the target verification result indicates that the verification is not passed. Or, if the first verification result indicates that the registered relationship of the source end and the destination end for sending and receiving messages exists, but the second verification result indicates that the function state of the source end and the destination end for sending and receiving messages is disabled, the target verification result indicates that the verification is not passed.

[0105] In the implementation of S206, the routing distribution policy of the source end for sending the target message to the destination end is determined by the service key information of the source end, such as the source end system, the service type, the service channel, and the message type, and the destination end. Based on this, the target message is queried for routing distribution according to the source end and the destination end, and the target routing distribution policy of the target message is obtained, which means that the target message is queried for routing distribution according to the source end system, the service type, the service channel, the message type, and the destination end of the source end. Therefore, in an optional implementation of the embodiment of the application, S206 is specifically: the target message is queried for routing distribution according to the service key information of the source end and the destination end, and the target routing distribution policy of the target message is obtained; the service key information includes the source end system, the service type, the service channel, and the message type.

[0106] S207: The sending switch control of the target message is performed according to the destination end, and a second control result is obtained.

[0107] S208: If the second control result indicates that the sending switch state is enabled, the target message is sent to the destination end according to the target routing distribution policy.

[0108] In the embodiment of the application, after the target message sent by the source end received by S205-S206 is verified through the cryptographic relationship and the target routing distribution policy of the target message is queried, the message forwarding between different business systems and external agencies also needs to meet the service requirements between the corresponding business systems and external agencies. Therefore, the message preposition system needs to implement fine-grained forwarding switch control to ensure that all forwardable messages are forwarded and no non-forwardable messages are released. Based on this, the message preposition system also needs to perform sending switch control of the target message according to the destination end to obtain a second control result. If the second control result indicates that the sending switch state is enabled, the target message is sent to the destination end according to the target routing distribution policy.

[0109] If the second control result indicates that the sending switch state is disabled and is temporarily suspended, the target message is temporarily stored in the local sending message queue, and the target message is temporarily suspended from being sent to the destination end. When the second control result indicates that the sending switch state is enabled, the target message is read from the local sending message queue, and the target message is sent to the destination end according to the target routing distribution policy.

[0110] In addition, in the embodiment of the application, if the second control result indicates that the sending switch state is disabled and discarded, the target message is directly discarded, and the target message does not need to be sent to the destination end.

[0111] The S201-S202 receiving switch control mode can ensure that when an unexpected risk occurs in a business system or an external organization, the message preposition system can directly close the message access door between the business system and the external organization as a gate total controller to prevent accidents; and at the same time of closing the message access between the business system and the external organization, the message access between other business systems and the external organization can still be normally carried out.

[0112] Through various embodiments provided by the embodiment, when the message preposition system sends a target message from a source end to a destination end, the source end performs receiving switch control on the target message to obtain a first control result; if the first control result indicates that the receiving switch state is enabled, the target message sent by the source end is received; the target message is subjected to interface verification by a business interface corresponding to the source end to obtain a target verification result; if the target verification result indicates that the verification is passed, the target message is stored; the source end and the destination end are subjected to secret relationship verification based on the target message to obtain a target verification result; if the target verification result indicates that the verification is passed, the target message is subjected to routing distribution query according to the source end and the destination end to obtain a target routing distribution strategy of the target message; the target message is subjected to sending switch control by the destination end to obtain a second control result; if the second control result indicates that the sending switch state is enabled, the target message is sent to the destination end according to the target routing distribution strategy. It can be seen that in the scenario of message interaction between a business system of a bank and an external organization, the message processing method of the message preposition system supports message access and forwarding between different business systems and different external organizations when different source ends send target messages to a destination end through different receiving switch control, interface verification, secret relationship verification, routing distribution query and sending switch control, and can converge and centrally manage the message transmission channel of the bank for external interaction to reduce the risk of network intrusion and attack.

[0113] In addition, in the embodiment of the application, the message preposition system may occur abnormal events, and it is also necessary to automatically acquire abnormal events and automatically process after automatically grading, so as to improve the processing capability of abnormal capture, grading and recovery, reduce the development cost and operation and maintenance cost of the preposition system, and enhance the system robustness; based on this, in addition to the above S201-S208, the method further comprises: automatically acquiring an abnormal event occurred in the message preposition system; automatically grading the abnormal level of the abnormal event; and automatically processing the abnormal event according to the abnormal level of the abnormal event to obtain a processing result of the abnormal event. Therefore, in an optional embodiment of the application, the method further comprises the following S1-S3 (not shown in the figure):

[0114] S1: acquiring an abnormal event occurred in the message preposition system;

[0115] S2: grading the abnormal event to obtain an abnormal level of the abnormal event;

[0116] S3: automatically processing the abnormal event according to the abnormal level, and obtaining a processing result of the abnormal event.

[0117] In S2, the abnormal level is divided into four levels, i.e., a prompt abnormality, a secondary abnormality, a major abnormality, and a serious abnormality. The prompt abnormality has no influence on the message preposition system and only provides a risk prompt. The secondary abnormality is generally an abnormality that can be automatically recovered. The major abnormality is an important transaction abnormality or an important index abnormality, which needs to be manually confirmed and checked. The serious abnormality is a major system abnormality, which needs to be immediately checked and processed by an operation and maintenance personnel.

[0118] In the implementation of S3, the abnormal event is automatically processed according to the abnormal level through a timing task. After the processing is successful, the abnormal state of the abnormal event is updated. If the processing fails, the abnormal event will be automatically processed according to the abnormal level by the next timing task. The maximum processing number and the interval of the walk-around processing can be flexibly configured through data items.

[0119] In addition, in the embodiments of the present application, the database of the message preposition system also has registered data of one or more of health state data, abnormal information data, important matter data, and the like. Based on this, the message preposition system can also be detected based on the registered data in the database to obtain a system detection result of the message preposition system, so as to prompt the system detection result to an operation and maintenance user of the message preposition system, and to realize the detection and prompt of one or more of the health state data, the abnormal information data, and the important matter data of the message preposition system. Therefore, in an optional implementation manner of the embodiments of the present application, the method further includes the following S4-S5 (not shown in the figure):

[0120] S4: detecting the message preposition system based on the registered data in the database corresponding to the message preposition system to obtain a system detection result of the message preposition system; the registered data includes one or more of health state data, abnormal information data, and important matter data.

[0121] S5: prompting the system detection result to an operation and maintenance user of the message preposition system.

[0122] The system detection of the message preposition system according to the health state data mainly detects whether the network connectivity, the service alive of the destination end, the server memory, the system service process and the like are normal. The system detection of the message preposition system according to the abnormal information data mainly performs data scanning and state detection on the abnormal information data, and correspondingly, the system detection result including the abnormal alarm is prompted to the operation and maintenance user of the message preposition system, that is, the initial registration abnormality and the abnormal failure processing obtained by performing data scanning and state detection on the abnormal information data send the alarm prompt to the operation and maintenance user of the message preposition system to prompt the function, time and the like of the abnormality. The system detection of the message preposition system according to the abnormal information data mainly performs data scanning and state detection on the important matter data, and correspondingly, the system detection result prompted to the operation and maintenance user of the message preposition system means that the operation and maintenance user of the message preposition system is prompted according to the prompt time and the period data item, so as to avoid the operation and maintenance user forgetting the important matter data.

[0123] In addition, in the embodiment of the application, the user can also store the target message sent by the query source end to the destination end in the message preposition system. Considering that the query permissions of different users are different, the message preposition system needs to display the target message after data desensitization according to different query permissions for different users. Based on this, in response to the query request of the target user for the target message, the target message is desensitized according to the query permission of the target user, and the desensitized target message is obtained and displayed to the target user. Therefore, in an optional implementation manner of the embodiment of the application, the method further includes the following S6-S7 (not shown in the figure):

[0124] S6: In response to the query request of the target user for the target message, desensitizing the target message according to the query permission of the target user to obtain the desensitized target message;

[0125] S7: Displaying the desensitized target message to the target user.

[0126] Referring to Figure 3 , Figure 3 A specific flowchart of a message processing method provided by the embodiment of the application. The specific flowchart is that: receiving switch control, receiving the target message sent by the source end, interface verification, storing the target message, secret relationship verification, routing distribution query, sending switch control, and sending the target message to the destination end. In addition, the specific flowchart further includes: rejecting the target message sent by the source end, temporarily storing the target message in the local sending message queue, and discarding the target message.

[0127] The receiving switch control refers to: when a target message is sent from a source end to a destination end, receiving switch control is performed on the target message by the source end to obtain a first control result. The receiving the target message sent by the source end refers to: if the first control result indicates that the receiving switch state is enabled, the target message sent by the source end is received. The interface verification refers to: interface verification is performed on the target message by a service interface corresponding to the source end to obtain a target verification result. The storing the target message refers to: if the target verification result indicates that the verification is passed, the target message is stored. The secret relationship verification refers to: secret relationship verification is performed on the source end and the destination end based on the target message to obtain a target verification result. The routing distribution query refers to: if the target verification result indicates that the verification is passed, routing distribution query is performed on the target message according to the source end and the destination end to obtain a target routing distribution strategy of the target message. The sending switch control refers to: sending switch control is performed on the target message by the destination end to obtain a second control result. The sending the target message to the destination end refers to: if the second control result indicates that the sending switch state is enabled, the target message is sent to the destination end according to the target routing distribution strategy. The rejecting the target message sent by the source end refers to: if the first control result indicates that the receiving switch state is disabled, the target message sent by the source end is rejected. The temporarily storing the target message in the local sending message queue refers to: if the second control result indicates that the sending switch state is disabled and is temporarily suspended, the target message is temporarily stored in the local sending message queue, and the target message is temporarily suspended from being sent to the destination end. The discarding the target message refers to: if the second control result indicates that the sending switch state is disabled and is discarded, the target message is directly discarded, and the target message does not need to be sent to the destination end.

[0128] Next, the specific implementation of the message processing device in the embodiment of the present application is described in detail through an embodiment.

[0129] Referring to Figure 4 , Figure 4 A structural schematic diagram of a message processing device provided in the embodiment of the present application. In the embodiment, the device may, for example, specifically include: a control unit 401, a receiving unit 402, a verification unit 403, a storage unit 404, a verification unit 405, a query unit 406, and a sending unit 407.

[0130] The control unit 401 is configured to, when a target message is sent from a source end to a destination end, perform receiving switch control on the target message by the source end to obtain a first control result.

[0131] The receiving unit 402 is configured to, if the first control result indicates that the receiving switch state is enabled, receive the target message sent by the source end.

[0132] The verification unit 403 is configured to perform interface verification on the target message by a service interface corresponding to the source end to obtain a target verification result.

[0133] The storage unit 404 is configured to store the target message if the target verification result indicates that the verification is passed.

[0134] The verification unit 405 is configured to perform a verification on a source end and a destination end based on the target message, and obtain a target verification result.

[0135] The query unit 406 is configured to perform a routing distribution query on the target message based on the source end and the destination end if the target verification result indicates that the verification is passed, and obtain a target routing distribution strategy of the target message.

[0136] The control unit 401 is further configured to perform a sending switch control on the target message based on the destination end, and obtain a second control result.

[0137] The sending unit 407 is configured to send the target message to the destination end based on the target routing distribution strategy if the second control result indicates that a sending switch state is enabled.

[0138] In an optional embodiment of the present application, the verification unit 405 is specifically configured to:

[0139] perform a registration relationship verification on the source end and the destination end based on the sending and receiving of the message, and obtain a first verification result;

[0140] perform a function state verification on the source end and the destination end based on the sending and receiving of the message, and obtain a second verification result;

[0141] determine the target verification result based on the first verification result and the second verification result.

[0142] In an optional embodiment of the present application, the query unit 406 is specifically configured to:

[0143] perform a routing distribution query on the target message based on the service key information of the source end and the destination end, and obtain a target routing distribution strategy of the target message; the service key information includes a source end system, a service type, a service channel and a message type.

[0144] In an optional embodiment of the present application, the interface verification manner includes one or more of the following:

[0145] a key field information verification, a message format verification and a transmission identity verification.

[0146] In an optional embodiment of the present application, the device further includes an acquisition unit, a grading unit and a processing unit.

[0147] The acquisition unit is configured to acquire an abnormal event occurring in the message preposition system.

[0148] The grading unit is configured to grade the abnormal event to obtain an abnormal level of the abnormal event.

[0149] The processing unit is configured to automatically process the abnormal event according to the abnormal level to obtain a processing result of the abnormal event.

[0150] In an optional implementation of the embodiment of the present application, the device further comprises a detection unit and a prompt unit.

[0151] The detection unit is configured to perform system detection on the message pre-processing system according to registered data in a database corresponding to the message pre-processing system to obtain a system detection result of the message pre-processing system, wherein the registered data comprises one or more of health state data, abnormal information data, and important matter data.

[0152] The prompt unit is configured to prompt an operation and maintenance user of the message pre-processing system with the system detection result.

[0153] In an optional implementation of the embodiment of the present application, the device further comprises a desensitization unit and a display unit.

[0154] The desensitization unit is configured to, in response to a query request of a target user for the target message, perform data desensitization on the target message according to a query authority of the target user to obtain a desensitized target message.

[0155] The display unit is configured to display the desensitized target message to the target user.

[0156] According to various embodiments provided in the embodiment, when the message preposition system sends a target message from a source end to a destination end, a first control result is obtained by performing receiving switch control on the target message at the source end; if the first control result indicates that the receiving switch state is enabled, the target message sent by the source end is received; a target verification result is obtained by performing interface verification on the target message according to a service interface corresponding to the source end; if the target verification result indicates that the verification is passed, the target message is stored; a target verification result is obtained by performing secret relationship verification on the target message based on the source end and the destination end; if the target verification result indicates that the verification is passed, a target routing distribution strategy of the target message is obtained by performing routing distribution query on the target message according to the source end and the destination end; a second control result is obtained by performing sending switch control on the target message at the destination end; if the second control result indicates that the sending switch state is enabled, the target message is sent to the destination end according to the target routing distribution strategy. It can be seen that in the scenario of message interaction between the business system of the bank and the external agencies, the message processing device of the message preposition system supports message access and forwarding between different business systems and different external agencies when different source ends send target messages to the destination end through different receiving switch controls, interface verifications, secret relationship verifications, routing distribution queries and sending switch controls, and can converge and centrally manage the message transmission channels of the bank for external interaction to reduce the risk of network intrusion and attack.

[0157] In addition, the embodiment of the application further provides a message preposition system, which comprises an interface module and a transmission module.

[0158] The interface module is configured to perform receiving switch control on a target message when the target message is sent from a source end to a destination end, and obtain a first control result; if the first control result indicates that the receiving switch state is enabled, the target message sent by the source end is received; perform interface verification on the target message, and obtain a target verification result; if the target verification result indicates that the verification is passed, the target message is stored.

[0159] The transmission module is configured to perform secret relationship verification on the target message, and obtain a target verification result; if the target verification result indicates that the verification is passed, perform routing distribution query on the target message, and obtain a target routing distribution strategy of the target message.

[0160] The interface module is further configured to perform sending switch control on the target message, and obtain a second control result; if the second control result indicates that the sending switch state is enabled, send the target message to the destination end according to the target routing distribution strategy.

[0161] Reference is made to Figure 5 , Figure 5The embodiment of the application provides a structural diagram of a message preposition system. The message preposition system comprises an interface module 501, a transmission module 502, an exception processing module 503, a detection module 504 and a management end 505. The interface module 501 comprises functions such as receiving switch control, receiving request, interface verification, sending switch control and sending request, is used for executing S201-S202, S203-S204 and S207-S208, and supports various HTTP requests, HTTPS requests, TCP requests, SOCKET requests, MQ requests, TLQ requests, JMS requests and WEBSERVICE requests. The transmission module 502 comprises functions such as secret relationship verification and route distribution query, and is used for executing S205-S206. The exception processing module 503 comprises functions such as exception acquisition, exception grading and exception automatic processing, and is used for executing S1-S3. The detection module 504 comprises functions such as detection and prompt of one or more of health state data, exception information data and important matter data, and is used for executing S4-S5. The management end 505 comprises functions such as data desensitization display of target messages, and is used for executing S6-S7. In addition, the management end 505 can be used by a login user of the message preposition system to query normal messages, statistical information and exception information. A super administrator of the message preposition system can register a user account for an accessed business personnel, formulate role permissions, system permissions, menu query permissions, information query permissions and operation permissions. The business personnel is not open to modification and deletion permissions, but only provides part of the query permissions. It is ensured that different business personnel can only perform part of the authorized operations on their own related business or system, and the login user operations are recorded. The super administrator has operation permissions on the data, and can perform emergency operations. In addition, the super administrator can customize, modify and publish a route distribution strategy, customize, modify and publish a secret relationship, and quickly and flexibly configure a transmission channel according to requirements, so that the messages on the transmission channel can be quickly and orderly transmitted.

[0162] In addition, the embodiment of the application further provides a computer device, the computer device comprising a processor and a memory:

[0163] The memory is used to store a computer program and transmit the computer program to the processor.

[0164] The processor is used to execute the method according to the instructions in the computer program.

[0165] In the specification, each embodiment is described in a progressive manner, and each embodiment focuses on the difference from other embodiments. The same or similar parts of each embodiment can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the related parts can be referred to the method part.

[0166] Those skilled in the art will further recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0167] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. The terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0168] The above description is merely a preferred embodiment of this application and is not intended to limit the application in any way. Although this application has disclosed preferred embodiments above, it is not intended to limit the application. Any person skilled in the art can make many possible variations and modifications to the technical solutions of this application using the methods and techniques disclosed above, or modify them into equivalent embodiments with equivalent changes, without departing from the scope of the technical solutions of this application. Therefore, any simple modifications, equivalent changes, and modifications made to the above embodiments based on the technical essence of this application without departing from the content of the technical solutions of this application shall still fall within the protection scope of the technical solutions of this application.

Claims

1. A method of processing a packet, the method comprising: The application is applied to a message preposition system, comprising: When a target message is sent from a source end to a destination end, a receiving switch control is performed on the target message by the source end to obtain a first control result; If the first control result indicates that the receiving switch state is enabled, the target message sent by the source end is received; An interface check is performed on the target message by a service interface corresponding to the source end to obtain a target check result; If the target check result indicates that the check is passed, the target message is stored; A secret relationship verification is performed on the source end and the destination end based on the target message to obtain a target verification result; If the target verification result indicates that the verification is passed, a routing distribution query is performed on the target message by the source end and the destination end to obtain a target routing distribution strategy of the target message; A sending switch control is performed on the target message by the destination end to obtain a second control result; If the second control result indicates that the sending switch state is enabled, the target message is sent to the destination end according to the target routing distribution strategy.

2. The method of claim 1, wherein, The secret relationship verification on the source end and the destination end based on the target message to obtain a target verification result comprises: A registration relationship verification of sending and receiving messages is performed on the source end and the destination end to obtain a first verification result; A function state verification of sending and receiving messages is performed on the source end and the destination end to obtain a second verification result; The target verification result is determined according to the first verification result and the second verification result.

3. The method of claim 1, wherein, The routing distribution query on the target message by the source end and the destination end to obtain a target routing distribution strategy of the target message comprises: A routing distribution query is performed on the target message by the source end and the destination end according to service key information of the source end to obtain a target routing distribution strategy of the target message; the service key information comprises a source end system, a service type, a service channel and a message type.

4. The method of claim 1, wherein, The interface check mode comprises one or more of the following: Key domain information check, message format check and transmission identity check.

5. The method of claim 1, wherein, The method further comprises: An abnormal event occurring in the message preposition system is obtained; An abnormal level of the abnormal event is obtained by performing abnormal grading on the abnormal event; A processing result of the abnormal event is obtained by performing automatic processing on the abnormal event according to the abnormal level.

6. The method of claim 1, wherein, The method further comprises: A system detection result of the message preposition system is obtained by performing system detection on the message preposition system according to registered data in a database corresponding to the message preposition system; the registered data comprises one or more of health state data, abnormal information data and important matter data; The system detection result is prompted to an operation and maintenance user of the message preposition system.

7. The method according to any one of claims 1 to 6, characterized in that, The method further comprises: In response to a query request of a target user for the target message, a desensitized target message is obtained by performing data desensitization on the target message according to a query authority of the target user; The desensitized target message is displayed to the target user.

8. A packet processing device, characterized by, The application discloses a packet prepositioning system, which comprises a control unit, a receiving unit, a checking unit, a storage unit, a verification unit, a query unit and a sending unit. The control unit is configured to control the receiving switch of the target packet according to the source end when the target packet is sent from the source end to the destination end, and obtain a first control result. The receiving unit is configured to receive the target packet sent by the source end if the first control result indicates that the receiving switch is enabled. The checking unit is configured to perform interface checking on the target packet according to the service interface corresponding to the source end, and obtain a target checking result. The storage unit is configured to store the target packet if the target checking result indicates that the checking is passed. The verification unit is configured to verify the relationship between the source end and the destination end based on the target packet, and obtain a target verification result. The query unit is configured to query the routing distribution of the target packet according to the source end and the destination end if the target verification result indicates that the verification is passed, and obtain a target routing distribution strategy of the target packet. The control unit is further configured to control the sending switch of the target packet according to the destination end, and obtain a second control result. The sending unit is configured to send the target packet to the destination end according to the target routing distribution strategy if the second control result indicates that the sending switch is enabled.

9. A message prepending system, characterized by The application discloses a packet prepositioning system, which comprises a control unit, a receiving unit, a checking unit, a storage unit, a verification unit, a query unit and a sending unit. The interface module is configured to control the receiving switch of the target packet when the target packet is sent from the source end to the destination end, and obtain a first control result. The receiving unit is configured to receive the target packet sent by the source end if the first control result indicates that the receiving switch is enabled. The checking unit is configured to perform interface checking on the target packet, and obtain a target checking result. The storage unit is configured to store the target packet if the target checking result indicates that the checking is passed. The verification unit is configured to verify the relationship between the source end and the destination end based on the target packet, and obtain a target verification result. The query unit is configured to query the routing distribution of the target packet according to the source end and the destination end if the target verification result indicates that the verification is passed, and obtain a target routing distribution strategy of the target packet. The interface module is further configured to control the sending switch of the target packet, and obtain a second control result. The sending unit is configured to send the target packet to the destination end according to the target routing distribution strategy if the second control result indicates that the sending switch is enabled. The computer device comprises a processor and a memory.

10. A computer device, comprising: The memory is configured to store a computer program and transmit the computer program to the processor. The processor is configured to execute the method according to the instructions in the computer program. ​

Citation Information

Patent Citations

  • Transaction information exchange method and system between internal and external networks in financial industry

    CN107437102A

  • System assembly interaction method facing bank and enterprise direct connection channel

    CN107507002A